5

CVE-2005-2075

Exploit
PHP-Fusion 5.0 and 6.0 stores the database file with a predictable filename under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the filename in the administration/db_backups directory in PHP-Fusion 6.0 or the fusion_admin/db_backups directory in 5.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php Fusion ≫ Php Fusion Version 5.0
Php Fusion ≫ Php Fusion Version 6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.84% 0.932
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/15830
Patch
Vendor Advisory
http://www.vupen.com/english/advisories/2005/0888
http://dark-assassins.com/forum/viewtopic.php?t=142
Exploit
URL Repurposed